Merge pull request #660 from MicrosoftDocs/jacktremper-patch-1

Stacyrch140 · web-flow · commit 10d214a229a8 · 2024-08-07T18:02:04.000-04:00
Security global admin removals
diff --git a/sharepoint/docs-conceptual/sharepoint-online/introduction-sharepoint-online-management-shell.md b/sharepoint/docs-conceptual/sharepoint-online/introduction-sharepoint-online-management-shell.md
@@ -11,7 +11,7 @@ SharePoint Online PowerShell commands can be very efficient for batch operations
 
 ## Getting Started with SharePoint Online PowerShell
 
-To use SharePoint Online PowerShell commands, you must have the SharePoint Admin role or Global Administrator role in Microsoft 365.
+To use SharePoint Online PowerShell commands, you must have the SharePoint Admin role in Microsoft 365.
 
 You must install the SharePoint Online Management Shell module and connect to the SharePoint Online service. For more information, see [Connect SharePoint Online](connect-sharepoint-online.md).
 
diff --git a/sharepoint/sharepoint-ps/sharepoint-online/Add-SPOGeoAdministrator.md b/sharepoint/sharepoint-ps/sharepoint-online/Add-SPOGeoAdministrator.md
@@ -37,7 +37,7 @@ Add-SPOGeoAdministrator [-ObjectId] <Guid> [<CommonParameters>]
 ## DESCRIPTION
 
 This cmdlet requires a connection to a multi-geo tenant to run correctly.
-You must be a SharePoint Online administrator or Global Administrator to run this cmdlet.
+You must be a SharePoint Online administrator to run this cmdlet.
 
 ## EXAMPLES
 
diff --git a/sharepoint/sharepoint-ps/sharepoint-online/Add-SPOSiteCollectionAppCatalog.md b/sharepoint/sharepoint-ps/sharepoint-online/Add-SPOSiteCollectionAppCatalog.md
@@ -25,7 +25,7 @@ Add-SPOSiteCollectionAppCatalog -Site <SpoSitePipeBind> [-WhatIf] [-Confirm] [<C
 ## DESCRIPTION
 
 Use this cmdlet to add a site collection scoped app catalog to the specified site. To run this cmdlet user must have the following roles:
-* SharePoint Admin role or Global Administrator role
+* SharePoint Admin role
 * Site Collection Administrator of the tenant app catalog
 * Site Collection Administrator of the site collection of the site specified in the `-Site` parameter
 
diff --git a/sharepoint/sharepoint-ps/sharepoint-online/Add-SPOTenantCdnOrigin.md b/sharepoint/sharepoint-ps/sharepoint-online/Add-SPOTenantCdnOrigin.md
@@ -26,7 +26,7 @@ Add-SPOTenantCdnOrigin -CdnType <SPOTenantCdnType> [-Confirm] -OriginUrl <String
 
 Configures a new origin to public or private CDN, on either Tenant level or on a single Site level. Effectively, a tenant admin points out to a document library, or a folder in the document library and requests that content in that library should be retrievable by using a CDN.
 
-You must have the SharePoint Admin role or Global Administrator role and be a site collection administrator to run the cmdlet.
+You must have the SharePoint Admin role and be a site collection administrator to run the cmdlet.
 
 ## EXAMPLES
 
diff --git a/sharepoint/sharepoint-ps/sharepoint-online/Add-SPOUser.md b/sharepoint/sharepoint-ps/sharepoint-online/Add-SPOUser.md
@@ -24,7 +24,7 @@ Add-SPOUser -Group <String> -LoginName <String> -Site <SpoSitePipeBind> [<Common
 
 ## DESCRIPTION
 
-Along with the group memberships that are normally required to run Windows PowerShell, you must have the SharePoint Admin role or Global Administrator role and be a site collection administrator to use the `Add-SPOUser` cmdlet.
+Along with the group memberships that are normally required to run Windows PowerShell, you must have the SharePoint Admin role and be a site collection administrator to use the `Add-SPOUser` cmdlet.
 
 For permissions and the most current information about Windows PowerShell for SharePoint Online, see the online documentation at [Intro to SharePoint Online Management Shell](https://learn.microsoft.com/powershell/sharepoint/sharepoint-online/introduction-sharepoint-online-management-shell?view=sharepoint-ps).
 
diff --git a/sharepoint/sharepoint-ps/sharepoint-online/Connect-SPOService.md b/sharepoint/sharepoint-ps/sharepoint-online/Connect-SPOService.md
@@ -14,7 +14,7 @@ ms.reviewer:
 
 ## SYNOPSIS
 
-Connects a SharePoint Online administrator or Global Administrator to a SharePoint Online connection (the SharePoint Online Administration Center).
+Connects a SharePoint Online administrator to a SharePoint Online connection (the SharePoint Online Administration Center).
 This cmdlet must be run before any other SharePoint Online cmdlets can run.
 
 ## SYNTAX
@@ -35,7 +35,7 @@ Connect-SPOService [-ClientTag <String>] [-Credential <CredentialCmdletPipeBind>
 
 ## DESCRIPTION
 
-The `Connect-SPOService` cmdlet connects a SharePoint Online administrator or Global Administrator to the SharePoint Online Administration Center.
+The `Connect-SPOService` cmdlet connects a SharePoint Online administrator to the SharePoint Online Administration Center.
 
 Only a single SharePoint Online service connection is maintained from any single Windows PowerShell session.
 In other words, this is a per-geo within an organization administrator connection.
@@ -44,7 +44,7 @@ The Windows PowerShell session will be set to serve the new SharePoint Online ad
 
 A delegated partner administrator has to swap connections for different organizations within the same Windows PowerShell session.
 
-You must be a SharePoint Online administrator or Global Administrator to run the cmdlet.
+You must be a SharePoint Online administrator to run the cmdlet.
 
 For permissions and the most current information about Windows PowerShell for SharePoint Online, see the online documentation at [Intro to SharePoint Online Management Shell](https://learn.microsoft.com/powershell/sharepoint/sharepoint-online/introduction-sharepoint-online-management-shell?view=sharepoint-ps).
 
@@ -56,7 +56,7 @@ For permissions and the most current information about Windows PowerShell for Sh
 Connect-SPOService -Url https://contoso-admin.sharepoint.com -credential admin@contoso.com
 ```
 
-Example 1 shows how a SharePoint Online administrator or Global Administrator with credential admin@contoso.com connects to a SharePoint Online Administration Center that has the URL <https://contoso-admin.sharepoint.com.>
+Example 1 shows how a SharePoint Online administrator with credential admin@contoso.com connects to a SharePoint Online Administration Center that has the URL `<https://contoso-admin.sharepoint.com.>`
 
 ### -----------------------EXAMPLE 2-----------------------------
 
@@ -67,9 +67,9 @@ $cred = New-Object -TypeName System.Management.Automation.PSCredential -argument
 Connect-SPOService -Url https://contoso-admin.sharepoint.com -Credential $cred
 ```
 
-Example 2 shows how a SharePoint Online administrator or Global Administrator with a username and password connects to a SharePoint Online Administration Center that has the URL <https://contoso-admin.sharepoint.com.>
+Example 2 shows how a SharePoint Online administrator with a username and password connects to a SharePoint Online Administration Center that has the URL `<https://contoso-admin.sharepoint.com.>`
 
-### -----------------------EXAMPLE 3-----------------------------
+### --------------------`---EXAMPLE 3-----------------------------
 
 ```powershell
 Connect-SPOService -Url https://contoso-admin.sharepoint.com
@@ -130,7 +130,7 @@ Accept wildcard characters: False
 
 ### -Credential
 
-Specifies the credentials to use to connect. If no credentials are presented, a dialog will prompt for the credentials. The credentials must be those of a SharePoint Online administrator or Global Administrator who can access the SharePoint Online Administration Center site.
+Specifies the credentials to use to connect. If no credentials are presented, a dialog will prompt for the credentials. The credentials must be those of a SharePoint Online administrator who can access the SharePoint Online Administration Center site.
 
 ```yaml
 Type: CredentialCmdletPipeBind
diff --git a/sharepoint/sharepoint-ps/sharepoint-online/Disconnect-SPOService.md b/sharepoint/sharepoint-ps/sharepoint-online/Disconnect-SPOService.md
@@ -32,7 +32,7 @@ For more information, see `Connect-SPOService`.
 Even after a connection is terminated, operations that were started before the connection is terminated will run to completion.
 In other words, long-running operations will not be terminated by running the `Disconnect-SPOService` cmdlet or the `Connect-SPOService` cmdlet.
 
-You must be a SharePoint Online administrator or Global Administrator to run the cmdlet.
+You must be a SharePoint Online administrator to run the cmdlet.
 
 For permissions and the most current information about Windows PowerShell for SharePoint Online, see the online documentation at [Intro to SharePoint Online Management Shell](https://learn.microsoft.com/powershell/sharepoint/sharepoint-online/introduction-sharepoint-online-management-shell?view=sharepoint-ps).
 
diff --git a/sharepoint/sharepoint-ps/sharepoint-online/Set-SPOSite.md b/sharepoint/sharepoint-ps/sharepoint-online/Set-SPOSite.md
@@ -104,7 +104,7 @@ Set-SPOSite [-Identity] <SpoSitePipeBind>
 
 For any parameters that are passed in, the `Set-SPOSite` cmdlet sets or updates the setting for the site collection identified by parameter Identity.
 
-You must be a SharePoint Online administrator or Global Administrator and be a site collection administrator to run the cmdlet.
+You must be a SharePoint Online administrator and be a site collection administrator to run the cmdlet.
 
 For permissions and the most current information about Windows PowerShell for SharePoint Online, see the online documentation at [Intro to SharePoint Online Management Shell](https://learn.microsoft.com/powershell/sharepoint/sharepoint-online/introduction-sharepoint-online-management-shell?view=sharepoint-ps).
 
@@ -1199,7 +1199,7 @@ Accept wildcard characters: False
 
 ### -BlockDownloadPolicy
 
-As a SharePoint administrator or global administrator in Microsoft 365, you can block the download of files from SharePoint sites or OneDrive. This feature does not need Microsoft Entra Conditional Access policies. This feature can be set for individual sites but not at the organization level.
+As a SharePoint administrator in Microsoft 365, you can block the download of files from SharePoint sites or OneDrive. This feature does not need Microsoft Entra Conditional Access policies. This feature can be set for individual sites but not at the organization level.
 
 Blocking the download of files allows users to remain productive while addressing the risk of accidental data loss. Users have browser-only access with no ability to download, print, or sync files. They also won't be able to access content through apps, including the Microsoft Office desktop apps. When web access is limited, users will see the following message at the top of sites: "Your organization doesn't allow you to download, print, or sync from this site. For help contact your IT department." Read the full documentation for advanced capabilities at [Block download policy for SharePoint sites and OneDrive](https://learn.microsoft.com/sharepoint/block-download-from-sites).
 
@@ -1246,7 +1246,7 @@ Accept wildcard characters: False
 ```
 
 ### -EnableAutoExpirationVersionTrim
-Global and SharePoint Administrators can set site-level version history limit settings that universally apply to new versions created on all new document libraries created on the site. Also can create request to set the version setting for existing libraries that enabled versioning.
+SharePoint Administrators can set site-level version history limit settings that universally apply to new versions created on all new document libraries created on the site. Also can create request to set the version setting for existing libraries that enabled versioning.
 
 When version history limits are managed automatically, SharePoint employs an algorithm behind the scenes that deletes (thins out) intermittent older versions that are least likely to be needed, while preserving sufficient high-value versions - more versions in the recent past and fewer farther back in time - in case restores are required.
 
